ramackri opened a new pull request, #735: URL: https://github.com/apache/atlas/pull/735
## Summary - Replace legacy `atlas.authn.header.*` properties with `atlas.authentication.header.enabled` and `atlas.authentication.method.header.<logical-key>` mappings - Add `AtlasHeaderAuthConfiguration` to resolve logical keys (`username`, `roles`, `request-id`) to configurable HTTP header names - Refactor `AtlasHeaderPreAuthFilter` to use the new configuration model while preserving existing request-id behavior via the `atlas.request.id` request attribute - Remove vendor-specific header names from default property examples and tests ## Migration ```properties # Before atlas.authn.header.enabled=true atlas.authn.header.username=<header-name> atlas.authn.header.roles=<header-name> atlas.authn.header.requestid=<header-name> # After atlas.authentication.header.enabled=true atlas.authentication.method.header.username=<header-name> atlas.authentication.method.header.roles=<header-name> atlas.authentication.method.header.request-id=<header-name> ``` ## Test plan - [ ] Enable header auth with username/roles/request-id mappings in `atlas-application.properties` - [ ] Verify API access with curl using configured identity headers - [ ] Verify requests without username header remain unauthenticated via header auth - [ ] Verify request-id is propagated only for successful header-auth (`TRUSTED_PROXY`) requests - [ ] Run `AtlasHeaderAuthConfigurationTest` and `AtlasHeaderPreAuthFilterTest` https://issues.apache.org/jira/browse/ATLAS-5385 Made with [Cursor](https://cursor.com) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
